Web Security – Carelessness Can Lead to Stolen Data

By:
Categories: Backup, General, Security
No Comments

As I was walking to my car the other morning, I could not help but detect a girl’s purse sitting on the front seat of the car parked next to mine. Her purse was in plain view and her wallet was hanging out.

To be honest, the car was locked. However, I still could not help but believe how inconsiderate it was of her to leave her purse unattended and visible like that.

“Now some poor child will need to have a brick, smash the window, risking harm to himself, and possibly get caught due to the sound,” I thought. “It would be a good deal simpler and more affordable for everyone involved in the bag operator would leave the car unlocked – no window repair invoices, no glass to wash up and, for your child, possibly no record.”

The girl may have thought her handbag was safe. After all, she had been parked in a great part of a well-to-do suburb, with people walking around. What were the chances that somebody would come along and break her window?

While we like to think that we’ll not ever be the goal of a crime, particularly organized crime, the fact is: you don’t know. Carelessness can turn perfectly fine and trusting people into victims.

Security and Business

When it comes to business, we have a tendency to be a little more cautious than we are in our personal lives. A number of people conduct background checks on new employees and track our financial records frequently. But it’s rare that a business starts a website job with much consideration of how the final product has to be secure.

Sure, your server is in a locked room or a secure data center, you have implemented SSL, and you also need passwords to do anything… But guess what? This is barely enough to deter even the youngest of the new generation of hackers (AKA” script kiddies”). You must be aware of your business’s website-no matter how small-is available to anybody in the world 24/7 and cybercrime is a billion-dollar business.

Web application vulnerabilities that may put your website at risk include:

  • Injection flaws
  • Cross-Site Scripting
  • Broken Authentication and Session Management
  • Insecure Direct Object References
  • Cross-Site Request Forgery (CSRF)
  • Security Misconfiguration
  • Insecure Cryptographic Storage
  • Struggling to Limit URL Access
  • Insufficient Transport Layer Protection
  • Invalidated Redirects and Forwards

The scary reality is that your website and its information will most likely be professionally attacked in the not too distant future if it has not already. Organized crime is systematically stealing digital data and using it any way they could. Credit card numbers, email addresses, social security numbers, home addresses, passwords and other personal information are the newest underground money.